Report a Security Vulnerability

Email info@strongwork.com with the subject Security vulnerability report. If your report contains sensitive information, first ask us to arrange an approved secure transfer method.

• The affected product, service, URL, endpoint, version, or component.
• A clear description of the behavior and potential impact.
• Minimal, reproducible steps and any necessary proof of concept.
• The date and method of discovery.
• Whether any data was accessed, altered, retained, or disclosed.
• Contact information for follow-up, if you wish to provide it.

Use only the minimum access needed to confirm an issue. Stop testing and report promptly if you encounter customer data, credentials, confidential information, or evidence of active compromise. Do not retain or disclose that information.

Unless Strongwork gives specific written authorization, do not perform denial-of-service or destructive testing, social engineering, credential attacks, testing of another person's account, data exfiltration, physical testing, or testing of third-party systems that Strongwork does not own or control.

We will make reasonable efforts to acknowledge a usable report, validate it, and coordinate appropriate remediation and disclosure. Timing depends on severity, complexity, affected parties, and operational risk. This reporting channel does not create a bug bounty, guaranteed response time, reward, contract, or entitlement to public disclosure.